Parity sweep 3#2382

Draft

agbishop wants to merge 76 commits into

mainfrom

Commits on Jul 5, 2026

chore(ui-deps): upgrade frontend dependencies, gated green

Witness Patrol
and
claude
committed
chore(deps): full go get -u ./... upgrade, gated green

Witness Patrol
and
claude
committed
chore: sync beads tracker, drop obsolete spa/.keep placeholder

Witness Patrol
and
claude
committed
chore: untrack .claude/settings.local.json, add to gitignore

Witness Patrol
and
claude
committed
chore: gitignore transient checkpoint.md

Witness Patrol
and
claude
committed
chore(ci): add go fix modernize gate, apply remaining modernization

Witness Patrol
and
claude
committed
fix(s3): AWS-parity fixes — SSE persistence, ACL/replication/presign validation, response overrides

Witness Patrol
and
claude
committed
fix(ec2): tag every taggable resource type; real instance-attribute/lifecycle accuracy

Witness Patrol
and
claude
committed
fix(dynamodb): close Select/COUNT, batch-write duplicate-key, and transact-update key-mutation gaps

Witness Patrol
and
claude
committed
chore: restore dashboard/static/spa/.keep placeholder

Witness Patrol
and
claude
committed
fix(sns): wire SNS->Lambda and SNS->Firehose delivery in composition root

Witness Patrol
and
claude
committed
fix(lambda): RemovePermission wire-shape, ESM qualifier ARN parsing, permission persistence

Witness Patrol
and
claude
committed
fix(iam): disguised stubs, HTTP status codes, policy-doc encoding, persistence leaks

Witness Patrol
and
claude
committed
docs(parity): add per-service PARITY.md manifests + schema template

Witness Patrol
and
claude
committed
fix(sns): PublishBatch attribute wire-shape, signed-envelope, replay fan-out, delivery leaks

Witness Patrol
and
claude
committed
fix(sqs): duplicate XML decl, FIFO requeue ordering, RedriveAllowPolicy enforcement, persistence

Witness Patrol
and
claude
committed
fix(cloudwatchlogs): drop deprecated seq-token validation, metric-filter extraction, RejectedLogEventsInfo shape

Witness Patrol
and
claude
committed
fix(cloudwatch): PutMetricData all-or-nothing, Values/Counts arrays, missing comparison operator

Witness Patrol
and
claude
committed
fix(kms): GrantTokens on 8 grant-valid ops, error class, grant-index leak, tag-before-create

Witness Patrol
and
claude
committed
fix(cloudformation): idempotent DeleteStack, export-in-use enforcement, change-set exec gates, event pagination

Witness Patrol
and
claude
committed
fix(ecs): rebuild serviceIndex on restore, persist resourceTags, real service deployments

Witness Patrol
and
claude
committed
fix(cli): match cwBk.PutMetricData new single-return signature

Witness Patrol
and
claude
committed
fix(ecr): layer-upload FK/sequencing validation, PutImage digest verification

Witness Patrol
and
claude
committed
fix(rds): delete final-snapshot contract, DescribeDBInstances filters; drop tracked junk

Witness Patrol
and
claude
committed
fix(secretsmanager): data race on lazy store, wire-field names, version-stage move, idempotency

Witness Patrol
and
claude
committed
fix(ssm): parameter tier/version/hierarchy rules, document wire-shape + version selector

Witness Patrol
and
claude
committed
fix(apigatewayv2): per-protocol integration timeout, stage-tag 404, missing wire fields

Witness Patrol
and
claude
committed
fix(apigateway): rewrite PATCH semantics — multi-segment paths, value coercion, remove/copy

Witness Patrol
and
claude
committed
fix(kinesis): tag persistence data-loss, PutRecords not-found, ON_DEMAND shards

Witness Patrol
and
claude
committed
fix(stepfunctions): Map failure swallowing, empty history events, EXPRESS async, retry/catch

Witness Patrol
and
claude
committed
fix(eventbridge): target-type param structs, cron day-of-week, PutEvents validation

Witness Patrol
and
claude
committed
fix(autoscaling): revive dead lifecycle-hook timers, LaunchInstances wire, ExecutePolicy StepScaling

Witness Patrol
and
claude
committed
fix(elbv2): trust-store revocation wire shape, 400 error status, ALPN list, target ports

Witness Patrol
and
claude
committed
fix(route53): tag routing/persistence, CallerReference idempotency, error codes/status

Witness Patrol
and
claude
committed
fix(cloudfront): InconsistentQuantities validation, per-resource AlreadyExists codes, Function ARN

Witness Patrol
and
claude
committed
fix(elasticache): systematic error code/status, unreached sentinel, SnapshotName restore

Witness Patrol
and
claude
committed
fix(cognitoidp): real TOTP MFA (was accept-any-code stub), user-existence masking, deletion protection

Witness Patrol
and
claude
committed
fix(ses): void-result XML wire shape, sending-paused/quota enforcement, disguised stubs

Witness Patrol
and
claude
committed
fix(sts): TradeInToken expiry validation, signing algorithms, GetWebIdentityToken op, coarse lock

Witness Patrol
and
claude
committed
fix(glue): BatchGetPartition stub, error codes, orphan partitions, dropped fields

Witness Patrol
and
claude
committed
feat(store): generic typed datalayer store (Phase 3.1)

Witness Patrol
and
claude
committed
refactor(sqs): convert backend maps to pkgs/store (Phase 3.2 pilot)

Witness Patrol
and
claude
committed

Commits on Jul 6, 2026

refactor(ec2): convert 147 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(sagemaker): convert 70 region-nested backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(cloudformation): convert backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(dynamodb): convert 7 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(s3): convert backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(lambda): convert 9 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(iam): convert 14 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(glue): convert 37 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(ecs): convert 15 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(rds): convert 26 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(ssm): convert 18 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(iot): convert 35 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(quicksight): convert 27 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(apigateway): convert 18 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(cognitoidp): convert 12 backend maps to pkgs/store + eliminate 3 index maps (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(cloudfront): convert 23 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(redshift): convert 29 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(cloudwatch): convert 8 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(kms): convert 4 backend maps to pkgs/store + collapse grant tri-map (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(cloudwatchlogs): convert 26 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(bedrock): convert 34 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(pinpoint): convert 15 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(eventbridge): convert 13 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(elasticache): convert 12 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(sns): convert 5 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(elbv2): convert 5 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(appsync): convert 12 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(apigatewayv2): convert 17 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(opensearch): convert 17 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(memorydb): convert 10 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(ecr): convert 10 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(route53): convert 8 backend maps to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(kinesis): convert streams map to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed
refactor(secretsmanager): convert secrets map to pkgs/store (Phase 3.3)

Witness Patrol
and
claude
committed